EUVD-2024-16394

Malicious code in bioql PyPI...

EUVD-2024-49452

Malicious code in bioql PyPI...

EUVD-2025-11941

Malicious code in bioql PyPI...

EUVD-2024-47562

Malicious code in bioql PyPI...

EUVD-2024-27029

Malicious code in bioql PyPI...

EUVD-2025-11942

Malicious code in bioql PyPI...

EUVD-2025-12353

Malicious code in bioql PyPI...

EUVD-2024-50795

Malicious code in bioql PyPI...

EUVD-2023-43774

Malicious code in bioql PyPI...

EUVD-2025-28719

Malicious code in bioql PyPI...

EUVD-2024-1070

Malicious code in bioql PyPI...

EUVD-2025-14331

Malicious code in bioql PyPI...

EUVD-2025-4385

Malicious code in bioql PyPI...

EUVD-2022-51656

Malicious code in bioql PyPI...

Template Injection

PySpur is vulnerable to Template Injection. The vulnerability is due to improper neutralization of special elements due to unsafe handling of the usermessage argument in the SingleLLMCallNode function of the Jinja2 Template Handler component...

CVE-2025-6518

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/singlellmcall.py of the component Jinja2 Template Handler. The manipulation of the argument usermessage leads to imprope...

CVE-2025-6518

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/singlellmcall.py of the component Jinja2 Template Handler. The manipulation of the argument usermessage leads to imprope...

CVE-2025-6518

CVE-2025-6518 affects PySpur-Dev pyspur up to 0.1.18. The vulnerability is in the SingleLLMCallNode function (backend/pyspur/nodes/llm/single_llm_call.py) of the Jinja2 Template Handler, where improper neutralization of special elements in user_message enables remote exploitation. The exploit sta...

CVE-2025-6518 PySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engine

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/singlellmcall.py of the component Jinja2 Template Handler. The manipulation of the argument usermessage leads to imprope...

CVE-2025-6335

A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php of the component Template Handler. The manipulation of the argument notes leads to command injection. The attack may be initiated remotely...